Armin Ronacher 9ffd27cfaa fix(mcp): accept only http and https OAuth URLs ... A malicious MCP server could supply a file: or custom protocol authorization endpoint, which sign-in passed to the platform URL handler.		2026-10-23 12:19:56 +02:00
..
agent	fix: update deps for security advisories	2026-10-22 11:24:50 +02:00
ai	fix(ai): send fixed low top-level effort with Anthropic per-message effort	2026-10-23 12:11:54 +02:00
chord	feat(chord): Watchable, the common interface of values that can be watched	2026-10-23 09:31:09 +00:00
codemode	fix: update deps for security advisories	2026-10-22 11:24:50 +02:00
coding-agent	fix(mcp): accept only http and https OAuth URLs	2026-10-23 12:19:56 +02:00
durable	feat(chord): shared watch-handle implementation (Watch, NativeWatch); Durable uses it	2026-10-23 07:05:23 +00:00
env	fix: update deps for security advisories	2026-10-22 11:24:50 +02:00
evals	fix(evals): drop autoevals dependency	2026-10-22 23:32:38 +02:00
mcp	fix(mcp): accept only http and https OAuth URLs	2026-10-23 12:19:56 +02:00
telemetry	fix: update deps for security advisories	2026-10-22 11:24:50 +02:00
tui	fix(tui,coding-agent): rank contiguous fuzzy matches and search session fields separately	2026-10-22 21:39:17 +02:00